DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

MO: Hospital Accuses Woman of Violating HIPAA Laws for Taking Photos of Son

Posted on August 2, 2014 by Dissent

Campus Safety reports:

A woman was detained and ordered to turn over her cell phone at Mercy Hospital for taking pictures of her son during a doctor’s appointment.

Mandi Kay Wilson often takes pictures of her son’s audiology appointments because she uses the images on gofundme.com to raise money for her son’s expensive hearing aids. At age seven, her son is going deaf, ky3.com reports.

However, at her latest audiologist appointment, her doctor told her that taking photos of her son were a violation of HIPAA requirements.

Read more on Campus Safety.  The hospital issued the following statement:

We regret the confusion that this situation caused and want to ensure that there is clarity for both our patients and our staff regarding appropriate use of personal photography and video within our facilities.  The policy is currently under review. The idea is not to prohibit patients from capturing personal memories. However, we want to ensure that we protect everyone’s right to privacy. That includes other patients, visitors, co-workers and providers who may not want to appear in someone else’s photograph, video or recording.

At first blush, this may sound like a covered entity over-reacting or mis-applying HIPAA. I see no prohibition under HIPAA of a parent taking pictures of her own child, right? But not so fast…. if other patients show up in the photos taken by the mother, then the hospital does have a concern and responsibility under HIPAA. As to staff privacy issues, that’s not under HIPAA, but I can understand that employees might not want their pictures uploaded to the Internet without their consent. Clarifying the policy and working with patients on these issues sounds like it is definitely in order here and for other covered entities.

Category: Uncategorized

Post navigation

← AU: Hackers steal credit card details of thousands using MyCause charity website
AZ: Urology clinic discovers improper disposal of some patient information →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Ireland’s Data Protection Commission publishes 2024 Annual Report
  • The headlines suggested Freedman Healthcare suffered a ransomware attack that affected patient data. The reality was quite different.
  • Runsafe report: Medical device cyberattacks threaten patient care, strain budgets, top concern for healthcare sector
  • Ryuk ransomware’s initial access expert extradited to the U.S. from Ukraine
  • Alleged Geisinger hacker will defend himself pro se.
  • Tallahassee Memorial Healthcare reveals it was also impacted by Cerner/Legacy Oracle cyberattack
  • Hospital cyberattack investigation complete, no formal review needed (1)
  • Largest Ever Seizure of Funds Related to Crypto Confidence Scams
  • IMPACT: 170 patients harmed as a result of Qilin’s ransomware attack on NHS vendor Synnovis
  • DOJ’s Data Security Program: Key Compliance Considerations for Impacted Entities

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • US Judge Invalidates Biden Rule Protecting Privacy for Abortions
  • DOJ’s Data Security Program: Key Compliance Considerations for Impacted Entities
  • 23andMe fined £2.31 million for failing to protect UK users’ genetic data
  • DOJ Seeks More Time on Tower Dumps
  • Your household smart products must respect your privacy – including your air fryer
  • Vermont signs Kids Code into law, faces legal challenges
  • Data Categories and Surveillance Pricing: Ferguson’s Nuanced Approach to Privacy Innovation

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.